Red Hat Security Advisory

RHSA-2022:7967

qemu-kvm security, bug fix, and enhancement update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) qemu-guest-agent-17:7.0.0-13.el9, qemu-img-17:7.0.0-13.el9, qemu-kvm-17:7.0.0-13.el9 +19

TI-2021-02683 CVE-2021-3750 · GHSA-2v3x-7c37-r5r2

LOW 36

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00513 Published 2022-05-02 Partial fix CWE-416

TI-2021-02557 CVE-2021-3611 · GHSA-rj8x-cp5p-j26r

LOW 29

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00461 Published 2022-05-11 Partial fix CWE-119

TI-2021-02466 CVE-2021-3507 · GHSA-m99h-7jcp-j7w9

LOW 28

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00489 Published 2021-05-06 Partial fix CWE-119

TI-2021-03029 CVE-2021-4158 · GHSA-9p4w-6fpq-fpm6

LOW 27

A NULL pointer dereference issue was found in the ACPI code of QEMU.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00399 Published 2022-08-24 Partial fix CWE-476